infected with a virus when i refresh CFC? twice now

[truckingpete]

Umm, yah I just got it today, it freaked me out, never have your sound loud cuz my Anti-Virus talks to me and it was like WARNING: A virus has been detected.

But when I restarted it, it was fine.

By the way, this virus is a Trojen, that's what my anti-virus said and I didnt take a screenshot cuz I just found this thread

I went into the Main Civ 4 forum and an Active X thing popped up but I didnt click it, it liked click itself on its own then the thing popped up. If I get it again I'll get a screenshot.

BTW I got 3 different viruses when I did that....

Not good at all.....

And yes, I use IE......

 

[Aceman101]

IE is so vulnerable to viruses...

Which is why I don't use IE (I use firefox instead).

 

[Fifty]

@trucking: Did you notice what ad did it for you?

For me it has always been a banner ad for freegrocerycards.com

Here is a screenshot of my antivirus' log file for it, if that helps:

I'll try to get a SS of the actual attack next time it happens, but its difficult because I often end up having to restart.

 

[truckingpete]

Good news, I found it.

There are 2 of them! They happened right after another...And I don't think it was that kind of ad, though it might have been.....

This virus or trojen is located in Temp. Internet Files....well thats were it said when the virus 1st popped up....

Screenie

 

[Thunderfall]

Don't forget to take screenshots of the top and bottom banner ads too. Those are needed to report them to UGO.

I also recommend switching to FireFox.

 

[ChrTh]

For the last couple days my AV has been stopping win32/chepvil!generic ... not sure what that is. I'll try to get a screenshot next time, but it closes the window when it strikes.

I've also had the "Microsoft Downloader" info bar or whatever it is happen once today. Sorry, no screenie of that either. I'll keep an eye out for it.

 

[Fifty]

Ok so I got some better SS's of it just now:

SS as the attack happened:

Spoiler :

SS of top banner ad:

Spoiler :

SS of bottom banner ad:

Spoiler :

The FreeGroceryCard ad has been present every time this has happened, the other ad changes.

 

[Thunderfall]

Thanks. I've reported it to Telefragged.

 

[truckingpete]

I got the same Active X Message.....

 

[ChrTh]

The win32/chepvil!generic virus just hit me again from a banner ad. I wasn't able to get a screenshot before it shut down the window.

 

[gmaharriet]

I got the same thing twice today. In both cases it had that "grocery card" ad. I took a screenie, but Fifty has already posted a shot of it.

 

[KMadCandy]

i've got it again yesterday, and just now. both times this weekend, IE shut down afterward. i don't think that's my virus software, since it didn't happen the first few times i got infected back when i started this thread.

i'm not mad at CFC of course. i know that ads help keep the site here and that you guys do your best to make them the least annoying ones possible. i just downloaded firefox, because between that and the scrollovers that my mouse hits when i don't want them to i'm going nuts. and i was nuts already! update: posting with firefox now. thought i'd hate it since i hate it at the office. but seems that's just because i'm on a mac there, and never get used to it since 90% of the time i work from home. so, yay!

 

[truckingpete]

The return of the Grocery Virus

Dun-Dun-Dun

How does this ad make the virus pop up so quickly, thats what I dont get, dont you have to open it to download it?

 

[Thunderfall]

I have emailed Telefragged about it again. The earliest UGO could get to it is probably Monday though.

 

[Perfection]

I'm getting it too.

 

[Cheezy the Wiz]

As you know, I've had serious problems with popup ads from CFC in recent times. These problems still exist. Now, however, this has stepped up from a mere nuissance to a serious problem. Four times today I've been on CFC, and one of the ads has tried to install what my Anti-Virus calls a "Trojan Horse." When I ordered the antivirus to stop the Trojan Horse and delete the Temp files it installed, the Trojan simply started over again, and reinstalled the Temp files, and the whole thing starts over. Even after the browser window was closed, the problem continued, to the point where I had to turn off my modem to break the cycle.

Now, I'm familiar with what a Trojan Horse is, and I want to know why this site (CFC) is sponsoring or allowing such ads to exist on its site. If this is something TF or the mods were unaware of, I'm bringing it to your attention now. I greatly enjoy CFC, I don't want to have to stop coming here because of the constant harassment from ads, and banners trying to install things on my computer, and prying into my security defenses; if I wanted that, there are more entertaining sites for me to go to that can phish my computer.

 

[Methos]

Four times today I've been on CFC, and one of the ads has tried to install what my Anti-Virus calls a "Trojan Horse."

In order for TF to inform Telefragged of the problem, you need to take screenshots of the banner ads at both the top and bottom of the screen when the attack happens. Without those screenshots, I'm not sure TF can do much.

 

[Cheezy the Wiz]

I'll wait until it happens again then.

 

[truckingpete]

There's a thread that stats this issue. Thunderfall contacted them and they wont get it until Monday or something like that....

EDIT: Link to thread

http://forums.civfanatics.com/showthread.php?t=218440

 

[Cheezy the Wiz]

I started a seperate thread on this The Active X one crashes my internet, but there are at least two other ones out there that try to install Trojan Horses on my computer. Thank God for Avast!

Moderator Action: I have merged the two threads. -- TF